nbb-content

Read a content from Quad Miners Network Blackbox.

nbb-content [profile=PROFILE] session-id=SESSION-ID

Output Fields

Field	Type	Name	Description
profile	String	Connect profile	The identifier of Network Blackbox connect profile
_time	Date	Time	Session created time.
device_ip	IP address	Device IP
device_id	Integer	Device ID	e.g. 5900
session_id	Integer	Session ID	e.g. 11807
hash	Long	Hash	Session identifier. e.g. 3742031626
src_ip	IP address	Source IP
src_port	Integer	Source port
dst_ip	IP address	Destination IP
dst_port	Integer	Destination port
host	String	Host	e.g. naver.com
category	String	Category	e.g. cloud
action	String	Action	e.g. download
signature	String	Rule name
detect_rule_names	List	Detected rule names
host_id	Integer	Host ID
extract_rule_id	Integer	Extract rule ID
body	String	Body	Content body. e.g. raw HTML
created	Date	Created at
files	List	Files	uuid, file_name, file_size, file_type_name, md5, sha256 properties.